• webv4/lib/events/nodelist.js

    From Rob Swindell@VERT to Git commit to sbbs/master on Sunday, September 27, 2020 21:05:21
    Modified Files:
    Log Message:
    Anonymous nodes are now shown as "Anonymous" to non-sysops.

    Users that have put their terminal node into anonymous state (e.g.
    by using the ;anon command) should not have their identity exposed
    to non-sysops. This flaw was reported by altere in #synchronet.

    I'm not supporting translation of "Anonymous" here. We're not doing
    that for anonymously-posted messages either (yet), so I figured that
    was okay for now. There is a text.dat string for the word "Anonymous",
    it'd be nice if we just reused that, maybe.

    I also changed the node.status value magic number (3) to NODE_INUSE
    since we're loading nodedefs.js anyway, might as well.

    I'm not sure if it matters, but root/api/system.ssjs does not have
    this anonymous check either. I'm not sure where that code is used.

    Synchronet Vertrauen Home of Synchronet [vert/cvs/bbs].synchro.net